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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims : 

Claims 1-18. (canceled) 

19. (currently amended) A group signature device for providing a message 
(m) accompanied by a group signature (S), comprising: 

means for storing personalized data (z, Kz) identifying an individual 
member (M) of a group (G); 

encryption means (B3) for producing an encrypted text (C), intended to 
be associated with said message (m), using said personalized data (z, Kz) of one said 
individual member (TVO only; 

signing means (B6) for producing the group signature (S) with a private 
signature key (SK) common to all group members using the message to be signed (m) 
and said encrypted text (C) produced using the personalized data (z, Kz) of said one 
individual member (M) only; and 

means for outputting the message (m) and the group signature (S) to a 
checker, such that the checker, upon receiving the message accompanied by the group 
signature, is able to verify that the message (m) is associated with the group (G) based 
on the group signature (S), with the identity of the individual member (M) of the 
group (G) remaining anonymous to the checker. 

Claim 20. (canceled) 
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21. (previously presented) A group signature device according to claim 19, 
further comprising: 

means (B5) for combining the message (m) to be signed and the encrypted text 
(C) in the form of a concatenation of the message (m) with the encrypted text (C). 

Claim 22. (canceled) 

23. (previously presented) A group signature device according to claim 19, 
wherein 

said personalized data is an identifier (z) personal to the individual member 

(M); 

said means for storing further includes an encryption key (K) common to all 
members of the group (G); and 

encryption means (B3) produces said encrypted text (C) using the identifier (z) 
and said encryption key (K). 

24. (previously presented) A group signature device according to claim 23, in 
which encryption means (B3) produces said encrypted text (C) using the identifier (z) 
and a random number (r). 

25. (previously presented) A group signature device according to claim 19, 
wherein 

said personalized data is a diversified encryption key (Kz) specific to each 
member (M) of the group (G); and 

encryption means (B3) produces said encrypted text (C) using at least one data 
and said diversified encryption key (Kz). 
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26. (previously presented) A group signature device according to claim 25, 
wherein said at least one data includes a random number (r). 

27. (previously presented) A group signature device according to claim 19, 
wherein the encryption means (B3) uses a secret key encryption algorithm. 

28. (previously presented) A group signature device according to claim 19, 
wherein the encryption means (B3) uses one of the Rivest, Shamir, Adleman (RS A) 
public key encryption algorithm or the Advanced Encryption Standard (AES) secret 
key encryption algorithm. 

29. (previously presented) A group signature device according to claim 19, 
wherein the signing means (B6) uses a private key signature algorithm (SK). 

30. (previously presented) A group signature device according to claim 29, in 
which the private key signature algorithm is of the Rivest, Shamir, Adleman (RSA) 
type. 

31. (previously presented) A group signature device according to claim 19, in 
which said group signature device is a portable communicating device. 

32. (previously presented) A group signature device according to claim 31, in 
which said portable communicating device is a smart card. 

• 33. (currently amended) A method for secure communication of message (m) 
sent by an individual member (M) of a group (G) using a group signature (S), said 
method comprising: 

producing the group signature (S) of the message (m) by signing, with a 
private signature key (SK) common to all group members, a set including the message 

4 



Appln.No. 10/500,311 



Attorney Docket No. T2678-9156US01 



(m) and encrypted text (C) produced using a personalized data (z, Kz) of said one 
individual member (M) only; and 

outputting the message (m) along with the group signature (S). 

34. (previously presented) The method according to claim 33, further 
comprising: 

verifying, by using a public key (PK) corresponding to said private signature 
key (SK), that the message (m) is associated with the group (G) based on the group 
signature (S), without identifying the individual member (M) of the group (G). 

35. (previously presented) The method according to claim 33, further 
comprising the steps of: 

decrypting the encrypted text (C) thus obtaining the personalized data (z, 
Kz); and identifying the individual member (M) of the group (G) based on said 
personalized data (z, Kz). 

36. (previously presented) The method of claim 35, further comprising: 
producing a private signature key (SK) common to all members of group 

(G); 

producing personalized data (z, Kz) identifying the individual member 
(M) accepted into the group (G); and 

registering said personalized data (z, Kz) with the private signature key 
(SK) in an electronic device personalized to said individual member (M) of the group 
(G). 

Claims 37-38. (canceled) 
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39. (currently amended) A group signature system for ensuring a secure 
communication of a message (m) sent by an individual member (M) of a group (G) 
using a group signature (S), said group signature system comprising: 

an electronic device configured to store a personalized data (z, Kz) 
identifying the -one said individual member (M) of the group (G), to produce an 
encrypted text (C) intended to be associated with said message (m) using said 
personalized data (z, Kz) of said one individual member (M), and to produce the 
group signature (S) with a private signature key (SK) common to all group members 
using the message (m) and said encrypted text (C) produced using the personalized 
data (z 5 Kz) of said one individual member (M) only, and to output the message (m) 
and the group signature (S); 

a checker that receives the message (m) accompanied by the group 
signature (S) output from the electronic device, said checker being configured to 
verify that the message (m) is associated with the group (G) based on the group 
signature (S), the identity of the individual member (M) remaining anonymous to the 
checker; and 

a trusted authority configured to identify the individual member (M) of 
the group (G). 

Claim 40. (canceled) 
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